Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa
File: z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa (raw, json)
Hash identifier: uQ11jkD+2MzIqFlHgr0jlAF+ezlOM9wpcUkZ5cI8xPI=
Subject key identifier: CF:B6:5B:7E:FE:90:E4:3B:EF:4D:26:57:DB:98:4B:44:9D:FA:CE:EF
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 019421446F28E36E788612FE9ED4FC8F7B28
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa
Signing time: Wed 01 Jan 2025 09:48:40 +0000
ROA not before: Wed 01 Jan 2025 09:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 45.135.168.0/24 maxlen: 24
45.141.212.0/23 maxlen: 24
79.143.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6f:28:e3:6e:78:86:12:fe:9e:d4:fc:8f:7b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfb65b7efe90e43bef4d2657db984b449dfaceef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:34:a8:5f:ae:c9:84:4b:82:1e:a1:c5:ae:
0e:df:07:8b:c0:95:18:f0:34:8b:72:bc:84:f7:b3:
ae:29:bc:34:0a:19:3c:40:bb:96:1d:7c:68:21:0c:
59:75:9a:79:ec:4c:60:f9:e2:b2:b8:e7:7e:84:ee:
76:0f:dd:3d:49:4f:37:54:d1:9b:47:ea:c3:21:fd:
17:2f:8f:83:9c:99:fa:06:34:b0:eb:ca:16:95:07:
95:9b:7d:0b:e0:62:2a:7a:2a:84:9b:03:49:7a:2c:
13:c1:cc:9f:07:12:8d:f5:12:20:4c:e3:ed:f3:ca:
90:6f:c1:45:2d:c8:c2:08:14:be:e7:af:99:db:2a:
89:43:51:0c:6d:2c:0d:8a:a7:95:5b:93:d9:37:55:
24:99:34:77:97:ed:bf:a1:93:df:de:26:76:b2:e3:
36:e3:a3:ad:f9:82:57:ef:4d:15:fa:3f:b8:26:73:
89:d1:eb:e2:d0:24:64:26:ea:4a:3f:9f:4b:eb:a1:
64:50:82:8d:bd:d0:24:45:74:33:e0:95:2f:ab:df:
9b:f3:f6:95:5b:9a:74:bf:f3:86:43:eb:c7:2a:b2:
ab:84:cd:e4:05:b1:1d:36:dd:fd:2e:ba:9d:cc:52:
72:3e:ff:5b:d2:36:0a:04:f2:96:ab:94:49:06:40:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:5B:7E:FE:90:E4:3B:EF:4D:26:57:DB:98:4B:44:9D:FA:CE:EF
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/z7Zbfv6Q5DvvTSZX25hLRJ36zu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.168.0/24
45.141.212.0/23
79.143.136.0/24
Signature Algorithm: sha256WithRSAEncryption
db:8c:1f:01:cb:4f:02:3d:cb:4a:fe:6c:a7:70:ae:c4:b2:6a:
ae:c9:4f:41:88:f3:71:37:2f:17:e4:24:06:df:56:1a:bb:32:
3d:29:8f:e2:e6:bf:3d:c3:d0:61:0c:f9:cd:32:17:e2:7c:f1:
22:c2:0d:a6:fe:4d:51:e8:c2:f4:09:71:92:97:76:f3:10:9e:
c7:52:28:16:ba:93:8e:0e:e0:72:91:e8:e1:f2:ec:a6:f0:c6:
64:87:df:ff:33:82:78:cc:e7:8b:1f:3f:dc:67:cc:76:8f:f0:
37:72:77:45:23:6e:3d:39:90:f4:21:6d:9f:c7:a6:2f:b1:e5:
86:fc:39:4d:31:9b:31:6d:cf:28:84:83:0d:47:54:4f:e1:b1:
4d:56:bc:a9:e8:62:4a:1a:18:99:3d:ee:dc:ae:ec:c9:ec:f5:
94:02:8f:9c:3e:e4:9e:ba:70:56:aa:46:67:5d:d9:f2:b3:58:
b6:25:43:f0:1c:c5:c8:57:a2:20:96:16:ed:e5:b6:18:50:b5:
6f:78:40:7f:62:fe:94:99:0a:20:62:97:f3:f6:5d:30:55:57:
df:4c:41:20:73:9b:d6:88:7c:4a:51:99:b8:ee:a6:a6:38:cd:
d8:9f:49:ce:e0:5b:38:ca:44:47:0f:36:0a:67:20:65:56:9a:
66:68:55:de
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQhRG8o4254hhL+ntT8j3soMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm
OWYwN2UwHhcNMjUwMTAxMDk0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmI2NWI3ZWZlOTBlNDNiZWY0ZDI2NTdkYjk4NGI0NDlkZmFjZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLM0qF+uyYRLgh6hxa4O3weLwJUY
8DSLcryE97OuKbw0Chk8QLuWHXxoIQxZdZp57Exg+eKyuOd+hO52D909SU83VNGb
R+rDIf0XL4+DnJn6BjSw68oWlQeVm30L4GIqeiqEmwNJeiwTwcyfBxKN9RIgTOPt
88qQb8FFLcjCCBS+56+Z2yqJQ1EMbSwNiqeVW5PZN1UkmTR3l+2/oZPf3iZ2suM2
46Ot+YJX700V+j+4JnOJ0evi0CRkJupKP59L66FkUIKNvdAkRXQz4JUvq9+b8/aV
W5p0v/OGQ+vHKrKrhM3kBbEdNt39LrqdzFJyPv9b0jYKBPKWq5RJBkDWLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFM+2W37+kOQ7700mV9uYS0Sd+s7vMB8GA1UdIwQY
MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt
ZTY4ZjZjZjJjMGQyLzEvejdaYmZ2NlE1RHZ2VFNaWDI1aExSSjM2enU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUtZTY4ZjZjZjJjMGQy
LzEvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYeoAwQB
LY3UAwQAT4+IMA0GCSqGSIb3DQEBCwUAA4IBAQDbjB8By08CPctK/myncK7Esmqu
yU9BiPNxNy8X5CQG31YauzI9KY/i5r89w9BhDPnNMhfifPEiwg2m/k1R6ML0CXGS
l3bzEJ7HUigWupOODuBykejh8uym8MZkh9//M4J4zOeLHz/cZ8x2j/A3cndFI249
OZD0IW2fx6YvseWG/DlNMZsxbc8ohIMNR1RP4bFNVryp6GJKGhiZPe7cruzJ7PWU
Ao+cPuSeunBWqkZnXdnys1i2JUPwHMXIV6Iglhbt5bYYULVveEB/Yv6UmQogYpfz
9l0wVVffTEEgc5vWiHxKUZm47qamOM3Yn0nO4Fs4ykRHDzYKZyBlVppmaFXe
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:31 2025 by rpki-client